PRIVACY POLICY
Last updated: May 2026
This Privacy Policy describes Our policies and procedures on the collection, use, processing, and disclosure of Your Personal Information when You use the Service, and tells You about Your privacy rights under the Protection of Personal Information Act (Act No. 4 of 2013) (“POPIA”) and how the law protects You.
We use Your Personal Information to provide and improve the Service. By using the Service, You agree to the processing of information in accordance with this Privacy Policy.
1. INTERPRETATION AND DEFINITIONS
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
-
Account means a unique account created for You to access our Service or parts of our Service.
-
Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Kidz Cardz & Party Buckets PTY LTD, located at 1 Stamvrug Street, Mayberry Park, Alberton, South Africa.
-
Cookies are small files placed on Your computer, mobile device, or any other device by a website, containing details of Your browsing history.
-
Data Subject means the person to whom personal information relates (referred to as “You” or “Your”).
-
Information Officer means the person designated by the Company to ensure compliance with POPIA.
-
Personal Information means any information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person (company), as defined in Section 1 of POPIA.
-
Operator means a person or entity who processes personal information for a responsible party in terms of a contract or mandate, without coming under the direct authority of that party (equivalent to a Service Provider).
-
Responsible Party means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing personal information. For this policy, the Company is the Responsible Party.
-
Service refers to the Website.
-
Website refers to Kidz Cardz & Party Buckets, accessible from kidzcardz.co.za.
2. COLLECTING AND PROCESSING YOUR PERSONAL INFORMATION
Types of Data Collected
Personal Information
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You, or to process custom orders. Personally identifiable information includes, but is not limited to:
-
First name and last name
-
Email address
-
Phone number
-
Physical/Delivery Address, Province, City, Postal code
-
Customized design data (such as names and ages provided for personalized products)
Usage Data
Usage Data is collected automatically when using the Service. This may include Your Device’s IP address, browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, time spent on those pages, unique device identifiers, and other diagnostic data.
Third-Party Social Media Services
If You decide to register or log into our Website through a third-party service (Google, Facebook, Twitter/X), We may collect Personal Information already associated with that account, such as Your name and email address.
Cookies and Tracking Technologies
We use Cookies (Session and Persistent) and web beacons to ensure website functionality, remember preferences, and analyze web traffic via optimization tools. You can instruct your browser to refuse all cookies, though some parts of our online store may cease to function correctly as a result.
3. PURPOSE AND LEGAL BASIS FOR PROCESSING
The Company will only process Your Personal Information for lawful purposes where at least one of the conditions set out in Section 11 of POPIA is met. We use Your information for the following purposes:
-
Performance of a Contract: To process, manufacture, pack, and deliver custom party supplies, design proofs, and services You have purchased.
-
To Manage Your Requests: To attend to, reply to, and fulfill customer service queries or design revision requests.
-
Account Management: To manage Your registration as a user of the online shop.
-
Direct Marketing: We will only send you promotional materials, special offers, and newsletters via electronic communication if you have explicitly opted-in to receive them, or if you are an existing customer who purchased similar items from us previously, and you have been given the opportunity to opt-out.
-
Legal Obligations: To comply with South African accounting, tax, or corporate laws.
4. RETENTION OF PERSONAL INFORMATION
The Company will retain Your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy, or as legally required by South African business record laws (such as tax compliance under SARS regulations). When Personal Information is no longer required, it will be securely de-identified or destroyed.
5. CROSS-BORDER DATA TRANSFERS
Your information, including Personal Information, may be processed on servers or via cloud infrastructure located outside of South Africa (for example, hosting servers, CDN tools, or automated e-commerce backup solutions).
In accordance with Section 72 of POPIA, the Company ensures that any cross-border transfer of Your Personal Information is strictly to countries or entities that are subject to law, binding corporate rules, or binding agreements which provide an adequate level of data protection equivalent to POPIA.
6. SECURITY OF YOUR PERSONAL INFORMATION
The security of Your Personal Information is critical to us. We implement and maintain appropriate, reasonable technical and organizational measures to secure the integrity and confidentiality of personal information, and to prevent loss, damage, unauthorized destruction, or unlawful access.
7. PROTECTION OF CHILDREN’S PRIVACY
Our Service involves the creation of children’s party supplies, but our online storefront is intended for use by adults (parents and guardians). In accordance with Section 31 of POPIA, we do not knowingly collect or process Personal Information of children under the age of 18 without the explicit, verifiable consent of a parent or legal guardian.
If we learn that we have inadvertently collected personal information from a minor under 18 without parental verification, we will purge that data immediately.
8. YOUR PRIVACY RIGHTS UNDER POPIA
As a Data Subject in South Africa, you have the right to:
-
Request Access: Confirm whether we hold any of your Personal Information and request a copy of it free of charge.
-
Request Correction/Destruction: Request that we correct, amend, or delete personal information that is inaccurate, irrelevant, excessive, or outdated.
-
Object to Processing: Object at any time to the processing of your personal information for direct marketing purposes.
-
Lodge a Complaint: If you believe we have not processed your information lawfully, you have the right to lodge a formal complaint with the South African Information Regulator.
Information Regulator Contact Details:
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
PO Box 31533, Braamfontein, Johannesburg, 2017
Complaints email: complaints.IR@inforegulator.org.za
9. CONTACT US AND INFORMATION OFFICER
If you wish to access your data, correct it, or have any questions regarding this POPIA Privacy Policy, please contact our designated Information Officer:
-
Information Officer: Elizna Denysschen Mobile: 072 584 7083
-
Physical Address: 1 Stamvrug Street, Mayberry Park, Alberton
-
Email: info@kidzcardz.co.za